Oct 24 21:12:09 prd-ubuntu2004-docker-8c-8g-898 passwd[759]: password for 'ubuntu' changed by 'root' Oct 24 21:12:09 prd-ubuntu2004-docker-8c-8g-898 systemd-logind[825]: New seat seat0. Oct 24 21:12:09 prd-ubuntu2004-docker-8c-8g-898 systemd-logind[825]: Watching system buttons on /dev/input/event0 (Power Button) Oct 24 21:12:09 prd-ubuntu2004-docker-8c-8g-898 systemd-logind[825]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 24 21:12:09 prd-ubuntu2004-docker-8c-8g-898 sshd[870]: Server listening on 0.0.0.0 port 22. Oct 24 21:12:09 prd-ubuntu2004-docker-8c-8g-898 sshd[870]: Server listening on :: port 22. Oct 24 21:12:13 prd-ubuntu2004-docker-8c-8g-898 sshd[2014]: error: kex_exchange_identification: Connection closed by remote host Oct 24 21:12:20 prd-ubuntu2004-docker-8c-8g-898 sshd[3992]: Invalid user jenkins from 10.30.168.15 port 54654 Oct 24 21:12:20 prd-ubuntu2004-docker-8c-8g-898 sshd[3992]: Received disconnect from 10.30.168.15 port 54654:11: Closed due to user request. [preauth] Oct 24 21:12:20 prd-ubuntu2004-docker-8c-8g-898 sshd[3992]: Disconnected from invalid user jenkins 10.30.168.15 port 54654 [preauth] Oct 24 21:12:23 prd-ubuntu2004-docker-8c-8g-898 sshd[4870]: Invalid user jenkins from 10.30.168.15 port 54656 Oct 24 21:12:23 prd-ubuntu2004-docker-8c-8g-898 sshd[4870]: Received disconnect from 10.30.168.15 port 54656:11: Closed due to user request. [preauth] Oct 24 21:12:23 prd-ubuntu2004-docker-8c-8g-898 sshd[4870]: Disconnected from invalid user jenkins 10.30.168.15 port 54656 [preauth] Oct 24 21:12:25 prd-ubuntu2004-docker-8c-8g-898 sshd[5667]: Invalid user jenkins from 10.30.168.15 port 54658 Oct 24 21:12:25 prd-ubuntu2004-docker-8c-8g-898 sshd[5667]: Received disconnect from 10.30.168.15 port 54658:11: Closed due to user request. [preauth] Oct 24 21:12:25 prd-ubuntu2004-docker-8c-8g-898 sshd[5667]: Disconnected from invalid user jenkins 10.30.168.15 port 54658 [preauth] Oct 24 21:12:29 prd-ubuntu2004-docker-8c-8g-898 sshd[6788]: Invalid user jenkins from 10.30.168.15 port 54660 Oct 24 21:12:29 prd-ubuntu2004-docker-8c-8g-898 sshd[6788]: Received disconnect from 10.30.168.15 port 54660:11: Closed due to user request. [preauth] Oct 24 21:12:29 prd-ubuntu2004-docker-8c-8g-898 sshd[6788]: Disconnected from invalid user jenkins 10.30.168.15 port 54660 [preauth] Oct 24 21:12:31 prd-ubuntu2004-docker-8c-8g-898 sshd[7772]: Invalid user jenkins from 10.30.168.15 port 54662 Oct 24 21:12:32 prd-ubuntu2004-docker-8c-8g-898 sshd[7772]: Received disconnect from 10.30.168.15 port 54662:11: Closed due to user request. [preauth] Oct 24 21:12:32 prd-ubuntu2004-docker-8c-8g-898 sshd[7772]: Disconnected from invalid user jenkins 10.30.168.15 port 54662 [preauth] Oct 24 21:12:34 prd-ubuntu2004-docker-8c-8g-898 sshd[8692]: Invalid user jenkins from 10.30.168.15 port 54666 Oct 24 21:12:34 prd-ubuntu2004-docker-8c-8g-898 sshd[8692]: Received disconnect from 10.30.168.15 port 54666:11: Closed due to user request. [preauth] Oct 24 21:12:34 prd-ubuntu2004-docker-8c-8g-898 sshd[8692]: Disconnected from invalid user jenkins 10.30.168.15 port 54666 [preauth] Oct 24 21:12:37 prd-ubuntu2004-docker-8c-8g-898 sshd[9130]: Invalid user jenkins from 10.30.168.15 port 54668 Oct 24 21:12:38 prd-ubuntu2004-docker-8c-8g-898 sshd[9130]: Received disconnect from 10.30.168.15 port 54668:11: Closed due to user request. [preauth] Oct 24 21:12:38 prd-ubuntu2004-docker-8c-8g-898 sshd[9130]: Disconnected from invalid user jenkins 10.30.168.15 port 54668 [preauth] Oct 24 21:12:39 prd-ubuntu2004-docker-8c-8g-898 useradd[9407]: new group: name=jenkins, GID=1001 Oct 24 21:12:39 prd-ubuntu2004-docker-8c-8g-898 useradd[9407]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Oct 24 21:12:39 prd-ubuntu2004-docker-8c-8g-898 usermod[9440]: add 'jenkins' to group 'docker' Oct 24 21:12:39 prd-ubuntu2004-docker-8c-8g-898 usermod[9440]: add 'jenkins' to shadow group 'docker' Oct 24 21:12:40 prd-ubuntu2004-docker-8c-8g-898 sshd[9890]: Accepted publickey for jenkins from 10.30.168.15 port 54670 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Oct 24 21:12:40 prd-ubuntu2004-docker-8c-8g-898 sshd[9890]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 24 21:12:40 prd-ubuntu2004-docker-8c-8g-898 systemd-logind[825]: New session 1 of user jenkins. Oct 24 21:12:41 prd-ubuntu2004-docker-8c-8g-898 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 24 21:13:02 prd-ubuntu2004-docker-8c-8g-898 CRON[16523]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 24 21:13:02 prd-ubuntu2004-docker-8c-8g-898 CRON[16523]: pam_unix(cron:session): session closed for user root Oct 24 21:14:01 prd-ubuntu2004-docker-8c-8g-898 CRON[28743]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 24 21:14:01 prd-ubuntu2004-docker-8c-8g-898 CRON[28743]: pam_unix(cron:session): session closed for user root Oct 24 21:15:01 prd-ubuntu2004-docker-8c-8g-898 CRON[30262]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 24 21:15:01 prd-ubuntu2004-docker-8c-8g-898 CRON[30262]: pam_unix(cron:session): session closed for user root Oct 24 21:15:19 prd-ubuntu2004-docker-8c-8g-898 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/bgpcep-tox-verify-master ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Oct 24 21:15:19 prd-ubuntu2004-docker-8c-8g-898 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)